Skip to main content

expo-voice-to-text

Enables a voice-to-text pipeline in Expo React Native apps, integrating audio recording and transcription for seamless document creation.

Install this skill

or
57/100

Security score

The expo-voice-to-text skill was audited on Mar 8, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 269

Template literal with variable interpolation in command context

SourceSKILL.md
269`Recording is too large (${fileSizeMB.toFixed(1)} MB). ` +
medium line 277

Template literal with variable interpolation in command context

SourceSKILL.md
277const fileName = `recording.${ext || "m4a"}`;
medium line 399

Template literal with variable interpolation in command context

SourceSKILL.md
399`Audio file too large. Maximum is ${MAX_AUDIO_FILE_SIZE_BYTES / 1024 / 1024}MB`
medium line 411

Template literal with variable interpolation in command context

SourceSKILL.md
411`${GROQ_API_BASE_URL}${GROQ_TRANSCRIPTION_ENDPOINT}`,
medium line 414

Template literal with variable interpolation in command context

SourceSKILL.md
414headers: { Authorization: `Bearer ${env.GROQ_API_KEY}` },
medium line 694

Template literal with variable interpolation in command context

SourceSKILL.md
694router.push(`/document/${document.id}`);
medium line 483

Curl to non-GitHub URL

SourceSKILL.md
483curl -X POST http://localhost:3000/api/stt/transcribe \
low line 293

Fetch to external URL

SourceSKILL.md
293const response = await authenticatedFetch("/api/stt/transcribe", {
medium line 476

Access to .env file

SourceSKILL.md
476Add `GROQ_API_KEY` to your environment config and `.env` file. The service's
low line 368

External URL reference

SourceSKILL.md
368export const GROQ_API_BASE_URL = "https://api.groq.com/openai/v1";
low line 483

External URL reference

SourceSKILL.md
483curl -X POST http://localhost:3000/api/stt/transcribe \
Scanned on Mar 8, 2026
View Security Dashboard